iPhone security is a hot topic, and so when a developer takes to the stage to describe how rogue applications could “harvest personal data” on an unmodified iPhone without a user realising, you know there’s going to be some coverage. Nicolas Seriot gave a talk about iPhone Privacy in Geneva this week, and listed several ways [pdf link] in which Apple’s own APIs could be used to read or edit the address book, browse Safari and YouTube history, recent GPS position and more.
Seriot has put together an app – SpyPhone – that demonstrates what data is available merely through the standard APIs, and at first glance it’s eye-watering stuff. While passwords are blanked out, there’s a keyboard cache that logs every other word typed on the iPhone (it’s used in autocompletion). However, as the commenters at Slashdot have been discussing, security on the Apple smartphone is not just a case of on-device safeguards.






The neat thing about leaked ROMs is that often there are tidbits about upcoming devices to be discovered among the tweaked functionality. Supposedly buried in the recent Hero Android 2.1 ROM from HTC is 



